Static task
static1
Behavioral task
behavioral1
Sample
cbfa2ccadfd9ca6e0f8b015e747aaff3.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
cbfa2ccadfd9ca6e0f8b015e747aaff3.exe
Resource
win10v2004-20231215-en
General
-
Target
cbfa2ccadfd9ca6e0f8b015e747aaff3.exe
-
Size
393KB
-
MD5
cbfa2ccadfd9ca6e0f8b015e747aaff3
-
SHA1
e7ea3854f11c005ae8aa66de152df619951d0b20
-
SHA256
61b10aa37e635b771fba7a78ec6987959479239b20d03a379b7e57344be44992
-
SHA512
27fe1a382d74c74a1dc799aa0f73a6c4feab7a308cb95394158472c86901c6cbfedc75a71b298d7e90932aec490eb40b7d053c83cf24d07d3df63336773ab954
-
SSDEEP
6144:x9l1zFEK3cfaHSeZJdV8hGGjpgqDmJt9BB3efoLrn5HTn6V70KGSf:LllFXWKzZGjpgumJPqkS70mf
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource cbfa2ccadfd9ca6e0f8b015e747aaff3.exe
Files
-
cbfa2ccadfd9ca6e0f8b015e747aaff3.exe.exe windows:4 windows x86 arch:x86
09d0478591d4f788cb3e5ea416c25237
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 27KB - Virtual size: 156KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 366KB - Virtual size: 380KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE